41 matches found
September 8, 2026âKB5122878 (OS Builds 19045.7725 and 19044.7725)
September 8, 2026âKB5122878 OS Builds 19045.7725 and 19044.7725 Applies To Windows 10 ESU Windows 10 Enterprise LTSC 2021 Windows 10 IoT Enterprise LTSC 2021 Important Free support for Windows 10 Enterprise LTSC 2021 will end soon. For information about the availability of an Extended Security...
OMA Postback Link Vulnerability
OMA versions 1.5.0 to 1.21.2 have a post-link vulnerability. This vulnerability stems from the link-following vulnerability present in the filewrite tool sandbox. Attackers can create files outside of the workspace root directory using symbolic links, and leverage prompt injection to manipulate t...
Malicious code in @zalastax/nolb-oma (npm)
The package @zalastax/nolb-oma was found to contain malicious code. --- Credit: OpenSSF source...
CVE-2026-21020
Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions...
CVE-2026-21020
Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions...
CVE-2026-21020
Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions...
CVE-2026-39958
oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...
CVE-2026-39958
oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...
CVE-2026-39958
The oma package manager for AOSC OS is vulnerable to a CRLF injection flaw prior to version 1.25.2 . The oma-topics component fetches metadata for testing repositories (topics) from remote servers but fails to check the name field in the metadata for transliteration. A malicious party can provide...
CVE-2026-39958
oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...
CVE-2026-39958 oma-topic: name Field in Topic Manifests (topic.json) May Allow CRLF Injection
oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...
Oma injection vulnerability
Oma is an AOSC-Dev open-source package manager for AOSC OS. Versions of Oma prior to 1.25.2 had a injection vulnerability. This vulnerability stemmed from Oma-topics not checking the transliterated value of the name field in metadata, which could allow malicious APT source entries to be added to...
CVE-2026-39958: Improper Neutralization of CRLF Sequences
oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...
PT-2026-31657
oma is a package manager for AOSC OS. Prior to 1.25.2, oma-topics is responsible for fetching metadata for testing repositories topics named "Topic Manifests" mirror/debs/manifest/topics.json from remote repository servers, registering them as APT source entries. However, the name field in said...
CVE-2021-0628
In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722454; Issue ID: ALPS05722454...
EUVD-2021-3246
Malicious code in bioql PyPI...
EUVD-2021-3247
Malicious code in bioql PyPI...
MAL-2025-12804 Malicious code in @zalastax/nolb-oma (npm)
The package @zalastax/nolb-oma was found to contain malicious code...
Malicious code in @zalastax/nolb-oma (npm)
The package @zalastax/nolb-oma was found to contain malicious code...
CVE-2021-0627
In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722434; Issue ID: ALPS05722434...